The Government issues the Draft Personal Data Protection Regulations without any penalty clause
The government has released the long-awaited draft of the Digital Personal Data Protection Laws which would spell out any punitive action for breach.
The draft rules, which have been published for public consultation, will be considered for final legislation after 18 February.
“The draft laws are proposed to be made by the central government by exercising the powers conferred by sub-section (1) and (2) of section 40 of the Digital Personal Data Protection Act, 2023 (22 of 2023), before or after. the date on which this Act will come into force, are published to obtain the information of all people who may be affected by that,” said the draft.
The draft rules set out provisions related to the processing of consent of individuals, data processing organizations and the operation of authorities under the Digital Data Protection Act, 2023.
“…Notice is hereby given that these draft laws will be considered after February 18, 2025,” the notice said.
The draft rules did not mention the sanctions mandated under the DPDP Act, 2023.
The law has provisions to impose fines of up to Rs 250 crore on data fiduciaries — entities responsible for determining the purpose and means of processing personal data.